CVE-2015-0688 describes a denial-of-service vulnerability affecting Cisco ASR 1000 series devices running IOS XE 3.10.2S with an Embedded Services Processor (ESP) and NAT enabled. Remote attackers can trigger a module crash by sending malformed H.323 packets. This vulnerability carries a CVSS score of 7.1, indicating high severity due to its network-based attack vector, medium complexity, and complete availability impact. There is no evidence of active exploitation, nor are public exploit codes like Metasploit or ExploitDB modules available. While it has received minimal community discussion, it was mentioned in a Reddit post concerning vulnerabilities exploited by state-sponsored actors.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
13.10.2sCPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe:13.10.2s:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.